Backdoor

Backdoor.Win32.Emotet.cjre removal instruction

Malware Removal

The Backdoor.Win32.Emotet.cjre is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Win32.Emotet.cjre virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Mimics the system’s user agent string for its own requests
  • Expresses interest in specific running processes
  • Spoofs its process name and/or associated pathname to appear as a legitimate process

How to determine Backdoor.Win32.Emotet.cjre?


File Info:

crc32: AF7640F0
md5: cf265192f31e575ed5f4fd6e81289416
name: ma97pJnOGHaYF7O.exe
sha1: 71cd85c0017c0eca6ba03100f4da9b767f992eb6
sha256: 22a61786ed05c83ff2c030dc485671b9abca147791388811222b379dc97e1c5a
sha512: 0c9641113913a17ef237b4c8b8d6beb09cc3d0c03a2ab8754b5955cd3262cdc8a323d627b7694245020cd9a09cee4d5a3df7bc6dfc41a5d9d72275b4bf85fa12
ssdeep: 6144:n09Vywo8SWZccld5b2IOIQlNtGZknCiS6cynw:nYELcynw
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2006
InternalName: oscilloscope
FileVersion: 2, 0, 0, 0
CompanyName: Waikato University
PrivateBuild:
LegalTrademarks:
Comments: Modified by Cyril COMTE
ProductName: Waikato University oscilloscope-compressor
SpecialBuild:
ProductVersion: 2, 0, 0, 0
FileDescription: oscilloscope-compressor
OriginalFilename: oscilloscope.exe->compressor
Translation: 0x1409 0x04b0

Backdoor.Win32.Emotet.cjre also known as:

BkavW32.PhorpiexUPG.Trojan
MicroWorld-eScanTrojan.GenericKDZ.69612
FireEyeTrojan.GenericKDZ.69612
CAT-QuickHealTrojan.CKGENERIC
McAfeeEmotet-FRV!CF265192F31E
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Emotet.L!c
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.GenericKDZ.69612
K7GWRiskware ( 0040eff71 )
CyrenW32/Emotet.AQQ.gen!Eldorado
SymantecTrojan.Emotet
ESET-NOD32Win32/Emotet.CD
TrendMicro-HouseCallTROJ_GEN.R011C0DHM20
Paloaltogeneric.ml
ClamAVWin.Packed.Emotet-9481137-0
KasperskyBackdoor.Win32.Emotet.cjre
AlibabaTrojan:Win32/Emotet.3a61fa18
NANO-AntivirusVirus.Win32.Gen.ccmw
ViRobotTrojan.Win32.Emotet.204800.F
RisingTrojan.Kryptik!8.8 (TFE:5:4gyYUlpXDkN)
Ad-AwareTrojan.GenericKDZ.69612
TACHYONBanker/W32.Emotet.200808
F-SecureTrojan.TR/Emotet.hswub
DrWebTrojan.DownLoader34.26502
ZillyaTrojan.Emotet.Win32.24758
TrendMicroTROJ_GEN.R011C0DHM20
SophosTroj/Emotet-CLO
APEXMalicious
JiangminBackdoor.Emotet.sb
AviraTR/Emotet.hswub
Antiy-AVLTrojan/Win32.Emotet
MicrosoftTrojan:Win32/Emotet.ARJ!MTB
ArcabitTrojan.Generic.D10FEC
AhnLab-V3Trojan/Win32.Emotet.R348876
ZoneAlarmBackdoor.Win32.Emotet.cjre
GDataTrojan.GenericKDZ.69612
CynetMalicious (score: 90)
VBA32Backdoor.Emotet
ALYacTrojan.GenericKDZ.69612
MAXmalware (ai score=86)
MalwarebytesTrojan.MalPack.TRE
IkarusTrojan-Banker.Emotet
TencentMalware.Win32.Gencirc.10cdee3f
FortinetW32/Zenpak.AUSL!tr
AVGWin32:Trojan-gen
PandaTrj/Agent.PM
CrowdStrikewin/malicious_confidence_60% (W)
Qihoo-360Win32/Backdoor.3de

How to remove Backdoor.Win32.Emotet.cjre?

Backdoor.Win32.Emotet.cjre removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment